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Abstract 

Recently, physical layer security based approaches have drawn considerable attentions and are 
envisaged to provide secure communications in the wireless networks. However, most existing literatures 
only focus on the physical layer Thus, how to design an effective transmission scheme which also 
considers the requirements from the upper layers is still an unsolved problem. We consider such cross- 
layer resource allocation problem in the multi-user downlink environment for both having instantaneous 
and partial eavesdropping channel information scenarios. The problem is first formulated in a new 
security framework. Then, the control scheme is designed to maximize the average admission rate of 
the data, incorporating delay, power, and secrecy as constraints, for both non-colluding and colluding 
eavesdropping cases in each scenario. Performance analysis is given based on the stochastic optimization 
theory and the simulations are carried out to validate the effectiveness of our scheme. 

I. Introduction 

Recently, physical layer security has drawn considerable interests, and is expected to provide secure 
communications in the wireless networks. Physical layer security dates back to the Shannon's notion of 
perfect security ([T|, and then it is studied in (|2l Q They show that secure communication is possible 
if the legitimate receiver has a better channel than the eavesdropper. The impact of channel fading is 
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lately considered very helpful that perfect secrecy can be achieved even when the eavesdropping channel 
is stronger than the legitimate channel on average |I5] |l6l Q. 

So far many progresses are made to enhance the secrecy with the advanced physical layer tech- 
nologies. One of these is to employ beamforming to strengthen the quality of the legitimate link in the 
multi-antenna systems. In |8|, beamforming is proved to be the optimal strategy for secrecy in the MISO 
system. Then, the robust power allocation to maximize the secrecy rate for the MISO system is studied 
in jo) and flO\. To further improve the secrecy, artificial noise is used to degrade the eavesdropping 
channel ifTTl . Based on [TTl, beamforming and artificial noise are shown to evidently improve secrecy 
in the MIMO-OFDM system 1121 . In ifTSll . an optimization problem is investigated, which aims to 
minimize the total power consumption on both data and artificial noise to satisfy the minimum SNR at 
the legitimate user and a given average SNR at each eavesdropper In |fT4l . an analytical closed-form 
of the ergodic secrecy capacity of a single legitimate link in the presence of some eavesdroppers is 
calculated, and then the optimal power allocation between the data and artificial noise is also derived. 
More recently, in contrast to the secrecy outage formulated in |5|, a new formulation which can depict 
reUabiUty and security separately is proposed in ifTSll . Under this new framework, the benefits of the 
multiple transmitting antennas are investigated in lfT6l . 

However, most efforts are made only in the physical layer Thus, the interaction between the secrecy 
requirement in the physical layer and other QoS requirements (e.g., delay) in the upper layers of the 
wireless networks has not been sufficiently understood. So far a few papers have been published to 
solve this problem under the stochastic optimization framework (The stochastic optimization tool is 
used widely as in ITTll , IfTSl , and |fT9l ). In ||20| , a single hop uplink scenario is considered, where each 
node is controlled to send messages securely from other nodes with the objective of maximizing an 
overall utility. In 1211 . under a point to point secure communication scenario, the scheduling of the data, 
which is protected by either the physical layer security coding or the secret key, is investigated. In Il22l . 
the broadcast channel model is considered, and the arrival rate supported by the fading wiretap channel 
is analyzed and the power allocation policy is derived. 

In this paper, we consider a different problem from above papers. First, we focus on the multi-user 
downlink scenario like [231, and adopt a new security framework which can describe reliability and 
security separately, thus providing insight on the cross-layer resource allocation problem. Second, we 
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adopt beamforming and artificial noise as the physical layer technique. Then, a cross-layer power control 
scheme is carefully designed for both the total power allocation and the power ratio between the data and 
artificial noise, jointly considering delay, secrecy, energy consumption and multiuser diversity. Third, 
we focus on two scenarios. One is the sender has instantaneous eavesdropping channel information. 
The other one is that the sender only has partial eavesdropping channel information. In each scenario, 
both non-colluding and colluding eavesdropping cases are discussed. 

The remainder of this paper is organized as follows. The system model is given in Section II. The 
optimization problem is formulated in Section III. The control scheme and the performance analysis 
are presented in Section IV. Simulation results are given in Section V and the paper is concluded in 
Section VI. 

II. System Model 

We consider the secure communication between a transmitter (Alice) and K legitimate receivers 
(i.e., K Bobs) in the presence of Ne eavesdroppers (Eves), as shown in Fig.[T] Like ||23]| . the transmitter 
Alice is equipped with Na antennas and each legitimate receiver Bob has one antenna. The time is 
considered slotted. At each time slot, the transmitter sends information to a single receiver based on the 
time division multiple access (TDMA) scheme. In addition, each Eve is equipped with a single antenna. 
Non-colluding and colluding cases are considered. In the former case, each Eve individually decodes 
the intercepted information. While in the later case, A'^^ Eves jointly process their received information 
and we assume A^^ > A^^ as same as in lfT4l . 

We assume all the wireless hnks experience Rayleigh block fading. The channel gain varies from 
one time slot to another independently. In each time slot, the channel gain remains stable. During time 
slot t, we define hi(i) as the 1 x A'^ channel gain vector between Alice and Bob i (i e {1, . . . , AT}), and 
its element is distributed as CA/^(0, 1). is the 1 x A^^ channel gain vector between Alice and Eve j 
(j € {!,..., Ne}), and its element is distributed as CJ\f{0, 1). G(t) is the A^^ x A^^ channel gain matrix 
between Alice and colluding A^^ eavesdroppers. Each element is distributed as CJ\f{0, 1). w is additive 
white Gaussian noise with distribution CJ\f{0, cr^). w represents 1 x A^^ additive white Gaussian noise 
vector at A^^ colluding Eves and its distribution is CAf{0,I(T^). Without loss of generality, the noise is 
normalized with unit variance (cr^, = 1). 

We assume Alice can accurately obtain the instantaneous channel information between Alice and 
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Fig. 1. System model 



all K legitimate users. However, for the eavesdroppers, we consider two scenarios. The first scenario 
is that Alice can obtain the instantaneous eavesdropping channel information. The second scenario is 
that Alice only has partial information about the eavesdropping channel. More specifically, we assume 
Alice knows the number of Eves and the eavesdropping channel exhibiting Rayleigh fading, but Alice 
can not obtain the instantaneous eavesdropping channel gains. In each scenario, both non-colluding and 
colluding cases are considered. 

III. Problem Formulation 

In this section, a cross-layer problem is formulated. In the physical layer, the beamforming and the 
artificial noise generation are used to secure the data. While in the upper layer, the data queue of each 
user is required to be stable. We jointly consider the requirements from different layers as follows. 

A. Channel Capacity with Beamforming and Artificial Noise 

Beamforming and artificial noise are used as the physical layer technique to improve secrecy ifTTl 
lfT4ll . and it is described as follows. At time slot t, Alice generates an Na x Na matrix Z(<) = 
[zi(t) Z2(i)], where Zi(t) — \\Yi{t)\\ ^2(0 the null space matrix of h(t). The Na x 1 transmitted 
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symbol vector by Alice is given as x{t) = Xi{t)u{t) + Z2(t)v(t). The variance of u{t) is a^{t) and 
each element of the {Na — 1) x 1 vector \{t) has circular symmetric complex Gaussian distribution 
with variance cr^(i). u{t) and \{t) represent data and artificial noise, respectively. The total power for 
the data and artificial noise is P{t). Thus, P{t) = al{t) + {Na - i)crl{t). We denote the fraction of 
the total power allocated to the data is e{t). Therefore, al{t) = e{t)P{t) and al{t) = ^^~^^*^_jf 
The legitimate channel between Ahce and Bob i is 

ybi{t) = hi{t)x{t)+'w 

= lLii{t)zi{t)u{t) + h,{t)Z2{t)\{t) + w (1) 
= \ \hi{t)\\'^u{t)+w. 

The corresponding capacity of the legitimate channel between Alice and Bob z is a function of the 
control parameters P{t) and s{t), and is denoted as Cbi{t,P{t),e{t)) 

Cu{t,P{t),e{t)) = log2{l + al{t)\\\y,{t)f/al) 

(2) 

= log2{l+e{t)P{t)\\\ii{t)\\^). 
In the non-colluding case, the eavesdropping channel between Alice and Eve j is modeled as 

(3) 

The corresponding capacity of the eavesdropping channel between Ahce and Eve j is denoted as 

Cei{t,P{t),e{t)) 



Cej{t,P{t),s{t)) 



""^'^ (g,.(t)Z2(i)Z^(i)g*(i))a2(t) + al 
Similarly, in the colluding case, the eavesdropping channel between Alice and colluding Eves is 

yevesit) =G(i)xW+W 

=G(t)zi {t)u{t) + G{t)Z2 {t)\{t) + w. (5) 
=g^{t)u{t)+G2{t)y{t)+yv, 
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where gi{t) ~ G(i)zi(t) and G2(t) = G{t)Z2{t). The corresponding capacity of the eavesdropping 
channel between Alice and the colluding Eves is denoted as Ceves{t, P{t) , e{t)) 

Ceves{t,P{t),e{t)) 

\G2it)G;{t)aUt)+Ial+mmylit)\ 
\G2{t)G;{t)a^,{t)+Ial\ 

B. New Formulation of the Secrecy 

We consider a new security framework which can depict reliability and security separately as 
proposed in lITSI . For the secure communication between Alice and Bob i, Alice chooses two rates. 
The rate of the transmitted codewords Rbi{t) and the rate of the confidential information Rsi{t). 
Re{t) — Rbi{t) — Rsi{t) reflects the cost of securing the messages against the eavesdropping. For 
each transmission, Bob i can decode correctly if Cbi{t, P{t),e{t)) > Rbi{t). While perfect secrecy fails 
if the eavesdropping channel capacity Ce(<) is larger than Re(t). The secrecy outage probability Pgo is 
defined as ||T5l 

Pso = ^{Ce{t) > i?e(i) I message transmission). (7) 

Thus, the reliability (Rbi{t)) and security (i?e(i)) can be considered in ^ and (|7]i, separately. 

1 ) Instantaneous Eavesdropping Channel Information Scenario: We assume we can 
obtain the instantaneous eavesdropping channel information of all Ne eavesdroppers. Thus, we can 
achieve perfect secrecy, i.e., Pgo = 0. For the secure communication between AUce and Bob i, 
the secrecy rate at time slot < is a function of the control parameters P{t) and e{t), denoted as 
Rsi{t,P{t),e{t)). For both non-colluding and colluding cases, Rsi{t, P{t),e{t)) can be calculated as 
follows 

• Non-colluding case 

Rs^{t,P{t),e{t)) =[Rb^{t) - Re{t)] + 



(8) 



= [Cb^it,P{t),eit))- max Cej{t, P{t),e{t))] + , 
je{i.2,....NE} 

where [a]+ is max[a, 0]. 
CoUuding case 

Rs^{t,P{t),e{t)) =[i?f,,(t) - Re{t)] + 

^[Cb^{t, P{t), e{t)) - CeveAt, ^W, ^iM^ ■ 



(9) 
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2 ) Partial Eavesdropping Channel Information Scenario: Since we can not obtain the 
instantaneous eavesdropping channel state, it results in: 1) whether message is transmitted is independent 
from the current eavesdropping channel state, i.e., O is converted into the unconditional probability: 
Pso — IP(C'e(t) > Re{t)); 2) the perfect secrecy can not be guaranteed. Thus, we focus on designing 
the transmission scheme such that the secrecy outage P^o can satisfy certain secure level 77. For the 
communication between Alice and Bob i, the secrecy rate Rsi{t, P{t) , e{t) , rj) at time slot t for non- 
colluding and colluding cases are derived as follows. 

• Non-colluding case 

For Ne non-colluding eavesdroppers, the secrecy outage Pso is expressed as 1 — [P(Cej(t, P{t),e{t)) < 
i?e(t))]^^. Since the detailed distribution of Cej{t, P{t),e{t)) is complex, we consider the worst 
case that the SNR at the eavesdropper is very high so that ct^ is negligible compared to the 
artificial noise. By omitting cr^, in (HJi, we obtain the upper bound of Cej{t, P{t),e{t)), denoted 
asC,7(i,e(i)), 

|g,(t)zi(^)pag(^) ^ 
|g,Wzi(<)p(iV^-l)e(i) ^ 

=^052(1 



(g/t)Z2(t)Z*(t)g*(t))(l-e(i))^' 

where g^.^(f* (t)z*^(t)g* (t) ^ distribution as F-distribution with parameter (2, 2Nj^ — 2), and its 
probabiHty density function is f{x) = |141. 

Thus, to ensure that P^o satisfy secure level t], we let P^'p (i.e., 1 - [P(C"/(t, e(t)) < Re{t))]'^'') 
satisfy the secrecy outage requirement, where P(C"J(t, e(i)) < Re{t)) is calculated as follows 

F{c:fit,sit))<R,it)) 

£(t) 

=P(/052(1 + Y^^X) <i?e(i)) 

= -{Na- if-'-'ix + Na- ly-^^ + lL^(2«.w_i)i^ 



(11) 



- {Na - i)^^^-i((2«=(*) - 1)^-4^ + Na- l)'-^^ + 1. 
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Fig. 2. Secrecy outage probability versus e{t) for the non-colluding case in partial eavesdropping channel information scenario 
when Na = 6 and Ne = 3. 



For secure level 77, let P"? — rj, so the relationship between Re{t) and e{t) is 
- (Na - l)^--i((2^'(*) - 1)^4^ +Na- 1)1-^- 

(12) 

= (1 - 77)^ - 1. 

When Na — 6 and Ne — 3, the relationship between Re{t) and e{t) is shown in Fig. |2] Since 
Re{t) is determined by e{t) and 77, i?e(i) is denoted as Re{t, e{t),ri). Thus, the secrecy rate 
Rsi{t, P{t),e{t),r]) is determined as follows. 

Rs^{t,P{t),e{t),rJ) 

^[Rh^it) - Re{t)]+ (13) 

^[CM{t,P{t),eit)) ~ R,{t,s{t),ri)]+, 

where Cbi{t, P{t),e{t)) is calculated by 0, and Re{t,e{t),ri) is computed by (fT2T l. 
• Colluding case 

Similar to the non-colluding case, for Ne colluding Eves, the secrecy outage Pgo can be expressed 
as P(Ce„es(t, e(t)) > i?e(t)). We obtain the upper bound of Cevesit, Pit), ^{t)), denoted as 
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CeSes{t^£{t))^ by omitting al in © as in lfT4]| . 

=log^\\ + (i)g, {t)-gl (t) {al {t)G, (t)G* (*)) | (14) 

where gl(t){G2{t)G2{t))^^gi{t) has a distribution that its complementary cumulative distribution 
function is F^x) = ^"J^^J^^^J M- 

Thus, to ensure that Pso satisfy secure level t], we let P^p (i.e., F(C^P^^{t, e{t)) > Re(t))) satisfy 
this secrecy outage requirement, 

=¥{c::iAt) > Reit)) 

=¥{1092(1 + > ^-w) 

s[t) - 1 



^ 2^k=o \ k J-^ 

(l + (2«.(*)-l)£(^))A'.-i- 

For secure level rj, let P^p = 77, so the relationship between Re{t) and e{t) is 



(15) 



(16) 



(l + (2fl.(*)__i)£(^))^.-i 
For = 6 and Ne = 3, the relationship is shown in Fig. [3] Since Re(t) is determined by e{t) 
and 77, Re{t) is denoted as Re{t, e{t),ri). Thus, the secrecy rate Rsi{t, P{t) , e{t) , ij) is determined 
as follows 

i?,,(t,P(0,£W,?7) =[RM{t) ^ R,,{t)] + 

(17) 

where Cbi{t, P{t),e{t)) is calculated by and Re{t,e{t),ri) is computed by (fTST l. 

In the partial eavesdropping channel information scenario, for both non-colluding and colluding 
cases, when e{t) = 0, i.e., no data is transmitted, Re{t,e{t),ri) is defined as for any 77. Thus, 
Rsi{t,P{t),e{t),ri) = 0. When e{t) = 1, i.e., no artificial noise is generated, Re{t,e{t),ri) is defined 
as +00 for any 77. Thus, Rsi{t, P{t),e{t),ri) = 0. 
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Fig. 3. Secrecy outage probability versus e{t) for the colluding case in partial eavesdropping channel information scenario 
when Na = 6 and Ne = 3. 



C. Upper Layer Data Queue Process 

In the upper layer, the data queue process is considered. For user «(« = !,..., K) at time slot t, let 
Ai{t) denote the data arrival process. Only Ri{t) of Ai{t) are admitted into the data queue Ui{t) in order 
to keep the data queue stable. At time slot t, only one user i is served with rate Rsi{t, P{t),e{t),r]), 
which is related to the secrecy outage requirement rj, the total power P{t) and power ratio e{t). Data 
queue Ui{t) is updated as follows 

U,{t + 1) = max[U.,{t) - Rs^{t, P{t),e{t),Tj)I,{t),0] + R,{t), (18) 
where Ii{t) is an indicator. If Ii{t) — 1, it means user i is chosen for transmission at time slot t. 

D. Optimization Problem Formualtion 

We consider the optimization problem incorporating both the physical layer and upper layer Let 
denote the long term average admission rate of the data for user i, i.e., = limT^oo ^ Ym=o 
Let {61,62, ■■■ ,0k} be a collection of positive weights. Our objective is to maximize the sum of 
weighted average admission rate under the average power, secrecy and queue stability constraints. The 
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optimization problem can be formulated as follows 



K 

Maximize } OiVi 



s.t. 



limsup — ^ Ui{t) < +00, i 



1,...,K, 



(19) 




(20) 



(21) 



P{t) eU,e{t) e A,P,o<??. 



(22) 



In the above constraints, ( fT9] l requires the data queue to be stable. ( l20l i describes the average power 
constraint. (ISTT i shows that the admitted data is less than the arrival data. (|22]) means the selection set 
for total power P{t) is 11, the selection set for power ratio e{t) is A, and the secrecy outage constraint 
is 77. 

Similar to ifTsl lfT9l , to satisfy the average power constraint, a virtual power queue X{t) is defined. 
It is updated as follows 



IV. Control Scheme and Performance Analysis 

In this section, we present the control scheme and also give the performance analysis, using the 
stochastic optimization tool. 

A. Cross-layer Control Scheme 
1. Admission control: 



X{t + l)^ max[X(t) - P,,, 0] + P{t). 



(23) 



K 



Minimize ^(C/j(i) - V0^)R,{t), 



< Mt) < A,{t). 
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2. Power allocation: 



K 



Maximize ^ [/, {t)Rs^ {t, P{t) ,e{t), r])h [t) - X {t)P{t) , 



P{t) e n,£ 



{t) e A, P,o < V, 



where the secrecy rate Rsi{t, P{t), s{t), 77) is calculated differently under different conditions. When in 
the scenario that the instantaneous eavesdropping channel information is available, perfect secrecy (i.e., 
?7 = 0) can be achieved. Rsi{t, P{t), s{t), -q) are calculated according to ^ and (|9]) for non-colluding and 
colluding cases, respectively. When in the scenario that only partial eavesdropping channel information 
is available, a non-zero secrecy outage requirement can be satisfied. Rsi{t, P{t), £{t),ri) are calculated 
according to ( fT3] ) and ( fTTl ) for non-colluding and colluding cases, respectively. 

3. Queue update: 

The data queue Ui(t) and the virtual power queue X{t) are updated according to (fTSl l and ( |23l ). 
respectively. 

Control scheme proof: 

The proof is similar to lUSl IHl . We define Q{t) as a vector of all queues Q{t) ^ {Ui{t), . . . , Uxit), X{t)). 



The Lyapunov function of the queue Q{t) is L{Q{t)) = Ul(t) +X'^{t)]. The Lyapunov drift of 

the queue Q{t) is L{Q{t + 1)) - L{Q{t)) = \ E^i Vtit + 1) + ^^(t + 1)] - \ Ut{t) + ^^(t)]. 



where 



C/2(i + 1) - Ulit) <Uf{t)+R^{t) + {Rsdt,P{t),e{t),^)h{t)y+ 



2U,{t){R,{t) - R,,{t,P{t),e{t),ri)U{t)) ^U^{t) 



R}{t) + {R,,{t,P[t),e{t),Ti)h{t)f + 2U,{t){R^{t) - R,,[t,P{t),e{t),Ti)h(t)) 



X\t + 1) - X\t) < X\t) + P\t) + Pi + 2X{t){P{t) - Pa4t)) - X\t) 



PHt) + Pl 



+ 2X{t){P{t)-Pa,{t)). 
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The one time slot conditional Lyapunov drift of Q{t) is A{Q{t)), 

A{Q{t)) =E{L{Q{t + 1)) - L{QmQ{t)} 
1 ^ 

<E{ - (t) + it, P{t) ,e{t), ri)h {t)f + 2U, (t) (R, (t) - i?,, (t, P{t) ,e{t), ry)/, (t)) ] ^ 



i=l 



\[p'it) + Pi + 2x(t)(p(<) - PaM\m)} 



K 



<B + C + E{J2 U,{t){R,{t) - Rs^{t, P{t),e{t), r^)h{t)) \Q{t)}+ 

E{X{t){P{t)-Pa.{t))\Q{t)}, 

Where B = "^"^'""^^''^^'""^ . Arrival data process Ai(t) is bounded, so let Amax be a constant that 
Amax > Ai{t) for all i and t. In the real environment, the transmission power P{t) is finite, and 
the channel gain \h\'^ is bounded by a sufficiently large constant \h\'^^^. Let Rsmax be a constant 
that Rsmax > Rsi{t,P{t),e{t),Tq)Ii{t) for all i, t, P{t), e{t), rj, and channel states. Thus, B > 
lEtiiRUt) + {Rs^{t,P{t),e{t),rJ)^t))% C = :P^t^, i^,„,, > P{t) for all t. Thus, C > 
^[P^it)+Pl]. 

According to the stochastic optimization theory, the original optimization problem in Section IIII-DI 
can be solved by minimizing the following drift-plus-penalty expression: 

K 

Minimize A{Q{t)) - FE{^ 6l,i?i(i)|Q(t)} 

K 

=E{L{Q{t + 1)) - L{Q{t))\Q{t)} ~ VE{Y^ 0,i?,(i)|g(<)} 

i=l 

K 

<B + C + E{^ U,{t){R,{t) - Rs,{t, P{t),e{t), r,)/,(t)) \Q{t)}+ 

i=l 

K 

E{X{t){P{t) - Pav)\Qit)} - VE{Y,0,R^{t)\Q{t)} 

i=l 
K 

=B + C- E{X{t)Pa,\Q{t)} + E{J2{U,{t) - V0^)R,{t)\Q{t)}+ 

1=1 

K 

E{X{t)P{t) ~ U^{t)Rs^{t, P{t), e{t),ri)I,{t)\Q{t)} 



i=l 



Thus, to minimize A{Q{t)) — VE{^^^^9iRi{t)\Q{t)} is equal to minimizing '^^^i{Ui{t) 



Vei)R,{t) and X{t)P{t) - Y.f=i U^{t)R,,{t, P{t),eit),r^)h{t) in every time slot t. 
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B. Performance Analysis 

1. For user i, its data queue Ui{t) is upper bounded by a constant f/™"^ for all t: Ui{t) < JJ™'^^ = 

max ■ 

Proof: The proof is similar as in ifTSl lfT9l . For all i £ {1, • ■ • ,K}, when t — 0, all queues are 
initialized to 0. Thus, Ui{0) < JJ""''' is satisfied. Assume that Ut{t) < C/™"^ for any time slot t. For 
time slot t + 1, we need to consider two cases. 1) If Ui{t) < (7™"^ — Amax, we have Ui(t + 1) < 
U^{t) + R^{t) < t/™'^^ - A„^ax + R,{t) < C//""". 2) If U^{t) > C/™''^ - A„,ax, then U^{t) > Ve, + 
Amax — Amax = V9i. Thus, according to the control scheme, no data is admitted, i.e., Ui{t+1) < J7""^^. 

Thus, when parameter V is small, the queue length is short (i.e., small queuing delay). For 
queuing delay requirement Di of each user i in the system, the parameter V can be chosen as 

max 

2. The virtual power queue X{t) is bounded by a constant Xmax for all t: X{t) < Xmax = ^Urnax+ 

Prnax = iVOmax + 7^max + Pmax, whcrC Umax = maXjg{ 1.2, . . A'} ^^r""", ^max = maXjg{i^2,...,X}^'i, 

and 7 is any constant that satisfies Rsi{t, P{t), s{t), rf) < ^P{t) over all i, t, P{t), e{t), 77, and channel 
states. 

Proof: The proof is similar as in ifTSl |fT9l . There exists a finite 7 that Rsi{t, P{t), s{t), rf) < ^P{t), 
e.g., 7 can be chosen as the maximum directional derivative of Cbi{t, P{t),e{t)) with respect to P{t), 
maximized over all users, e{t) and channel states. When X{t) > ^Umax, the following holds 

K 



U,{t)R,,{t, P{t),e{t),ri)U{t) - X{t)P{t) 

i=l 
K 

< U^{t)Rs^{t, P{t), e{t),ri)U{t) - -iUmaxP{t) 
i=l 

K 

< ^ [/, {thP{t)I, (t) - lUmaxP{t) 



<o. 

The maximum is achieved when P{t) ~ 0. Therefore, when X{t) > jUmax, X{t) will not further 
increase. Thus, X{t) < jUmax + Pmax = 1V6 

max ^ Amax Pmax- 

3. The long term average admission rate achieved by our control scheme is within [B + C) /V of 
the optimal value: liminfT-i-oo^ X]t=^^ X^ili — Y^f=i^iK ~ ^v" ^ where B and C are 

constants, and r* = (r*, . . . , r|j.) is the optimal admission rate vector. 
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Proof: The proof follows standard steps under the stochastic optimization framework ifTSll |fT9]| . The 
optimal admission rate vector — (r*, . . . ,r|f) can in principle be achieved by the simple backlog- 
independent admission control algorithm. Thus, 

nR^{t)\Q{t)} = nR^m = rh 

E{R,,it,P{t),e{t),r^)hit)\Q{t)}=E{R,,{t,P{t),e{t),rj)I,{t)} > r* , 
E{P{t)\Q{t)} ^E{P{t)} < Pa,. 
Substitute three inequalities into the following right hand sides terms, 

MinimizeA(Q(i)) 

K K 

=E{L{Q{t + 1)) - L{Q{t))\Q{t)} + VE{Y^ e,R,{t)\Q{t)] - V^E{^ e,R,{t)\Q{t)] 



i=l i=l 

K K 



<B + C + VE{Y, e,R,{t)\Q{t)} + [/,(<) - i?,,(t, P{t), e{t), r^)h{t)) |Q(t)}- 

i=l i=l 
K 

E{X{t){P{t) - Pa,)\Q{t)] -VE{Y,O^R^{t)\Q{t)} 

i=l 

K K 

<B + C + VY, d,E{R,{t)\Q{t)] - vY^^i 



Therefore, 



'I' i 

i=l i=l 



E[A(g(t))] =E{L{Q{t + 1))} - E{L{Q{t))} 

K K 
i=l i=l 



Summing over t = 0, 1, 2, . . . T — 1, we have 

E{L{Q{T))} - E{i(g(0))} <T{B + C) + VJ2J2 (^MR^it)} ~ 0,r*. 



T-l K K 



t=0 i=l i=l 



It foUows that 



T-l K K 



i Y,Y.(^M{R^{t)} >Y.ey, - ^±^^E{L{Q{Q))}/TV 

Thus, liminfT^oe^ Ef=o' Eti O^E{R,{t)} > Y.f=i 0,r* - 

Thus, when V becomes larger, the average admission rate is more close to the optimal value. 
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V. Numerical Simulations 

In this section, we present the performance of our control scheme by simulations. All the channels 
are Rayleigh fading. 9i = 1 for all i G {1,2, . . . , K}. The selection set 11 for total power P{t) is 
{0, 100, 200, 300}, and the average power constraint Pav is 200. The selection set A for ratio e{t) is 

L"^' 20' 20' 20' ■ ■ ■ ' 20' J' 

A. Instantaneous Eavesdropping Channel Information 

In Fig. |4(a)| and Fig. |4(b)[ the system parameters for the simulation are Na=^, Ne=3, and K=2. 
Parameter V=5, 10, 20, and 100. The data arrival process for each user follows a binomial process with 
average A, which varies from 1 to 30. Fig. |4(a)| shows that 1) For a fixed V, in the left part (i.e., the low 
arrival rate region), the average admission rate is equal to the arrival rate. The reason is that when the 
arrival rate is lower than the average secrecy channel capacity, all the arrival data are admitted into the 
queue. When the arrival rate is larger than the average secrecy channel capacity, the average admission 
rate is saturated with the increased arrival rate. For a fixed arrival rate, if parameter V increases, the 
average admission rate is more close to the optimal value. 2) For fixed V and A, the average admission 
rate of the non-colluding case is higher than the one of the colluding case. Fig. |4(b)| shows that I) The 
average queue length is increased with the increment of parameter V and arrival rate A. 2) For fixed V 
and A, the average queue length in the non-colluding case is shorter than the one of the colluding case. 

In Fig. |5(a)| and Fig. |5(b)[ the system parameters are Ne=3, K=2, and 1^=100. The data arrival 
process for each user follows a binomial process with average A = 30. The number of transmission 
antennas Na=6, 8, 10, and 12. Fig. |5(a)| and Fig. |5(b)| show that 1) As the number of antennas increases, 
the average admission rate is increased and the average queue length is correspondingly decreased for 
both the non-colluding and colluding cases. 2) For the same number of antennas, the average admission 
rate of the non-colluding case is higher than the one of the colluding case, but the average queue length 
in the non-colluding case is shorter than the one in the colluding case. 

B. Partial Eavesdropping Channel Information 

In Fig |6(a)| and Fig. |6(b)| the system parameters for the simulation are Na=6, Ne=3, K=2, and 
7y=0.1. Parameter 1^=5, 10, 20, and 100. The data arrival process for each user follows a binomial 
process with average A, which varies from 1 to 30. Fig. |6(a)| shows that: 1) For a fixed V, in the left 
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Fig. 4. In (a), average admission rate versus average arrival rate for both non-colluding and colluding cases in instantaneous 
eavesdropping channel information scenario. In (b), average queue length versus average arrival rate for both non-colluding and 
colluding cases in instantaneous eavesdropping channel information scenario. 



part (i.e., the low arrival rate region), the average admission rate is equal to the arrival rate. The reason 
is that when the arrival rate is lower than the average secrecy channel capacity, all the arrival data are 
admitted into the queue. When the arrival rate is larger than the average secrecy channel capacity, the 
average admission rate is saturated with the increased arrival rate. For a fixed arrival rate, if parameter 
V increases, the average admission rate is more close to the optimal value. 2) For fixed V and A, the 
average admission rate of the non-colluding case is higher than the one of the colluding case. Fig. |6(b)| 
shows that; 1) The average queue length is increased with the increment of parameter V and arrival 
rate A. 2) For fixed V and A, the average queue length in the non-colluding case is shorter than the one 
in the colluding case. 

In Fig. |7(a)| and Fig. |7(b)| the system parameters are Na=6, Ne=3, K=2, and 1^=100. The data 
arrival process for each user follows a binomial process with average A = 30. The secrecy outage 
probability ?7=0.1, 0.2, 0.3, 0.4 and 0.5. Fig. |7(a)| and Fig. |7(b)| show that 1) For both non-colluding and 
colluding cases, when the secrecy requirement is loose (i.e., the secrecy outage probability rj becomes 
larger), the average admission rate is increased and the average queue length is correspondingly reduced. 
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(a) Average admission rate (b) Average queue length 

Fig. 5. In (a), average admission rate versus number of antennas for both non-colluding and colluding cases in instantaneous 
eavesdropping channel information scenario. In (b), average queue length versus number of antennas for both non-colluding and 
colluding cases in instantaneous eavesdropping channel information scenario. 



2) For the same secrecy outage i], the average admission rate of the non-colluding case is higher than 
the one of the colluding case, but the average queue length in the non-colluding case is shorter than 
the one in the colluding case. 

In Fig. |8(a)| and Fig. |8(b)[ the system parameters are Ne=3, K=2, ^=100, and 77=0.1. The data 
arrival process for each user follows a binomial process with average A = 30. The number of transmission 
antennas Na=6, 8, 10, and 12. Fig. |8(a)| and Fig. |8(b)| show that 1) As the number of antennas increases, 
the average admission rate is increased and the average queue length is correspondingly decreased for 
both the non-colluding and colluding cases. 2) For the same number of antennas, the average admission 
rate of the non-colluding case is higher than the one of the colluding case, but the average queue length 
in the non-coUuding case is shorter than the one in the colluding case. 

VI. Conclusion 

In this paper, we considered the cross-layer resource allocation problem for the multi-user secure 
communication system in both the sender having instantaneous and partial eavesdropping channel 
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Fig. 6. In (a), average admission rate versus average arrival rate for both non-colluding and colluding cases in partial 
eavesdropping channel information scenario. In (b), average queue length versus average arrival rate for both non-colluding and 
colluding cases in partial eavesdropping channel information scenario. 



information scenarios. In each scenario, for both non-colluding and colluding eavesdropping cases, 
we designed admission controller based on the information in the upper layer and power controller with 
the information from physical layer and upper layer. Simulation results validate the effectiveness of our 
scheme. 
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